Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier: 3c5r1NbdxhChV6MkZrmhP4MGY+nw+IQN5S/wFAMuLQI=
Subject key identifier: 17:1A:04:0D:B8:43:19:8E:F2:35:F6:DA:AA:03:B8:EB:95:23:05:33
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 0199277DAD19ACE6D812696EF27BCFF57F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number: 0369
Signing time: Mon 08 Sep 2025 04:02:51 +0000
Manifest this update: Mon 08 Sep 2025 04:02:51 +0000
Manifest next update: Tue 09 Sep 2025 04:02:51 +0000
Files and hashes: 1: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: It3xcPaJtmFQr9VlE0V8OmQ/01uaSjtgWIORKFfItDo=)
2: hYR6rq77HQceE2IcxPUKLad5kL4.roa (hash: +LqXV4/8ubLYmgyeWGpSO5Gif7f3L1TnP8kIXrA9Fjc=)
3: wn4QAHp5Rzb8lXeVuE7q6L111pE.roa (hash: 4bKaaL//q7uEAPyKRq4kflXDoCt6wQEv9YHzvR6r61o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:7d:ad:19:ac:e6:d8:12:69:6e:f2:7b:cf:f5:7f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: Sep 8 04:02:51 2025 GMT
Not After : Sep 9 04:02:51 2025 GMT
Subject: CN=171a040db843198ef235f6daaa03b8eb95230533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0c:31:58:0c:34:96:72:51:f5:88:08:1a:b0:
18:44:f7:14:aa:49:a5:5d:35:ec:d6:82:89:a7:34:
5f:b1:bf:3a:b5:b0:70:a9:c2:0f:b2:86:94:d1:73:
a6:5a:11:e2:24:41:5c:1d:09:82:6d:79:f0:ae:3f:
61:6c:f5:d5:a7:bc:99:b9:96:e5:de:54:e7:86:c2:
74:a6:67:99:24:8d:45:3e:03:42:5d:f5:c1:d3:35:
65:ed:9f:dc:aa:92:cb:8a:59:10:50:3a:b0:12:47:
f1:fa:12:08:0c:fb:06:5d:09:ed:33:e0:ad:ec:ac:
86:b8:fe:33:8f:29:29:ec:68:66:72:b7:8c:a6:1f:
f0:d1:96:25:24:29:84:77:ae:27:49:62:10:a1:4d:
35:07:de:4e:d2:77:0b:da:6b:31:d3:07:92:33:ff:
c5:74:2a:b3:34:d0:2e:5b:1b:16:ea:a2:65:c4:24:
a4:94:8b:a4:7e:51:92:12:ba:1a:26:2c:49:c4:95:
8d:5d:9b:ee:99:06:59:90:e9:c7:8e:a2:3c:28:69:
38:35:ac:d9:d9:ce:10:b7:a0:34:79:7b:fc:c8:34:
7b:b1:c9:61:77:5a:93:20:86:01:98:40:ee:ce:b1:
66:0b:06:e6:7c:61:ed:b3:27:2f:6d:bc:53:a1:16:
bc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1A:04:0D:B8:43:19:8E:F2:35:F6:DA:AA:03:B8:EB:95:23:05:33
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:94:b0:c8:62:8a:00:b5:70:f3:dd:93:34:c5:40:bf:08:e9:
1e:64:55:57:c0:6b:ef:45:f0:cc:c2:ba:8c:e8:61:eb:a1:9b:
2a:d7:bc:d6:e0:5e:b5:55:90:7b:ac:fc:70:92:19:5a:25:d3:
ba:cf:7e:7f:85:9f:e4:99:60:44:a0:63:e8:7c:ac:d0:04:45:
7e:1e:62:de:f9:b7:de:14:28:0c:a3:75:aa:47:19:9c:56:14:
38:be:f2:48:ad:18:1e:8a:8a:64:f9:47:7c:fa:25:61:5b:0d:
df:4c:63:d3:16:b5:3e:3d:5f:b1:92:82:f5:fe:76:36:be:41:
9b:1e:de:e0:17:5e:e6:ed:62:4e:a0:a9:c4:68:cd:bc:e3:1b:
21:cd:b5:b6:e0:b2:f6:5f:26:b2:96:05:a2:12:10:d8:88:e6:
19:28:48:a8:8e:ea:b6:c0:f1:27:b0:bd:01:76:ad:19:16:16:
14:46:f8:03:0a:42:2f:79:2d:99:a1:b5:75:54:33:23:ae:91:
c9:81:e3:72:94:98:d2:28:2d:1b:fc:41:69:a5:a3:52:66:49:
85:61:10:00:81:bc:c6:98:94:97:fa:9d:94:06:c4:66:f1:07:
5d:49:20:0a:9f:f1:21:7e:1b:0e:2d:6c:c9:1b:18:f6:02:3a:
a2:40:61:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:07:00 2025 by rpki-client